Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32312d3231203d3e203532353637.roa
File:                     3137372e38362e35362e302f32312d3231203d3e203532353637.roa (raw, json)
Hash identifier:          WA5Xp0o6Af4UfLzKgZIfXjS/3ir+MBBwthfSnNGlBlo=
Subject key identifier:   92:42:2A:21:03:F6:0D:7B:4F:C8:54:A0:7B:0D:CD:A4:28:77:12:0C
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       3ADDBD408D55E557F0AE76D51A05BD65C2578219
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32312d3231203d3e203532353637.roa
Signing time:             Wed 14 Feb 2024 21:50:03 +0000
ROA not before:           Wed 14 Feb 2024 21:45:03 +0000
ROA not after:            Wed 12 Feb 2025 21:50:03 +0000
asID:                     52567
IP address blocks:        177.86.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dd:bd:40:8d:55:e5:57:f0:ae:76:d5:1a:05:bd:65:c2:57:82:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Feb 14 21:45:03 2024 GMT
            Not After : Feb 12 21:50:03 2025 GMT
        Subject: CN=92422A2103F60D7B4FC854A07B0DCDA42877120C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:18:81:0b:8a:2d:26:f2:0f:60:aa:c2:2e:
                    fe:a9:67:99:87:92:0a:d0:35:19:81:d7:75:3f:cf:
                    a6:a5:7d:a8:a9:75:2c:f4:75:b1:fc:e6:2c:c1:b2:
                    09:85:e8:3a:e5:86:cc:fb:17:f2:e3:dd:f8:aa:36:
                    c8:40:82:79:71:35:b1:ba:63:3a:70:47:9c:f7:a3:
                    94:9e:6a:7e:95:17:d3:9e:10:8b:a4:13:71:c3:f1:
                    0b:57:a8:62:c2:d3:a6:d9:bf:61:38:3a:ea:c0:b0:
                    ab:01:f6:65:71:e6:e9:5a:b3:64:00:d7:b5:4d:55:
                    a2:14:cd:34:ec:11:89:0e:f9:92:36:05:8f:b7:1e:
                    ce:82:49:b9:5e:2b:be:ff:ed:f5:f3:c1:10:98:46:
                    ac:0d:1b:42:59:88:55:3a:15:49:4a:cd:97:56:40:
                    82:f8:3a:5d:85:1d:b2:0b:cd:59:18:19:dd:e8:8c:
                    25:32:e5:49:17:64:a0:d3:2c:f3:fa:6b:3f:06:ff:
                    51:6e:ed:43:93:07:69:16:21:81:65:71:d1:67:9b:
                    80:a4:c3:96:33:b7:ba:e6:2e:95:e1:ce:ca:26:cf:
                    76:c0:ac:55:7a:84:11:78:2e:80:e9:bf:0b:81:11:
                    7e:fe:29:97:95:19:e5:cc:3d:33:9a:e3:f1:a1:2e:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:2A:21:03:F6:0D:7B:4F:C8:54:A0:7B:0D:CD:A4:28:77:12:0C
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32312d3231203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:2d:a9:33:9e:19:18:f1:68:54:ab:65:72:23:0e:2d:d9:
         59:51:b6:86:1e:4f:e4:8f:1e:d7:70:0d:16:46:26:8b:d8:2d:
         38:29:06:f5:12:d4:a6:28:6f:7b:fc:fe:f6:2a:21:e5:e5:f8:
         9b:8a:de:53:f2:68:b5:ac:60:51:4d:2f:9e:b5:a1:3e:03:ad:
         d6:ee:69:47:60:7b:01:3e:39:b9:09:67:d8:7d:57:02:1d:9a:
         6f:bf:6e:3c:f3:ba:d2:59:64:1d:51:f0:1d:96:22:69:20:ff:
         52:ef:0d:e5:41:b5:dd:35:a9:30:47:82:c0:30:0a:b1:af:d5:
         21:ef:00:80:35:3d:d5:05:b4:fa:11:ab:15:df:61:13:46:ee:
         10:9f:79:7e:7b:a0:2f:a3:05:df:b2:10:29:ed:82:6c:5e:ab:
         82:00:8e:03:56:7b:fe:14:ce:a3:bd:8d:01:99:3b:e6:7e:78:
         53:e5:55:b6:a1:8c:e2:45:71:ec:8c:0f:5e:33:80:03:b5:32:
         23:13:f3:28:14:b1:ed:c5:04:a1:f7:75:3d:f6:43:e3:8b:f3:
         e3:ec:6c:5c:69:89:f4:2d:a4:ac:3b:60:ed:f5:d5:ce:e9:7f:
         92:7c:b6:f6:b3:af:c5:a8:37:cc:29:da:9b:e5:22:d5:cc:7a:
         91:4c:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org